sealkeep 0.11.5 → 0.11.6

package/CHANGELOG.md

@@ -3,6 +3,13 @@
 Notable changes, by published version. Sealkeep is pre-1.0: minor versions
 may change behavior, and say so here when they do.
 
+## 0.11.6 — 2026-09-25 — reconnect and Recovery Kit limits are separate
+
+- After a machine reconnects successfully, the Recovery Kit page says so even
+  if a later cloud check is paused by a service limit. It shows when that
+  check can be retried and no longer asks for another reconnect that cannot
+  lift the limit. The local recovery phrase and existing vault are unchanged.
+
 ## 0.11.5 — 2026-09-23 — compacting is safe, and a lost destination says so
 
 - **An agent that has just been compacted is told where the work stands.**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sealkeep",
-  "version": "0.11.5",
+  "version": "0.11.6",
   "type": "module",
   "description": "Sealkeep by SPALA AI — your AI coding-agent history, sealed, searchable, and shared across your machines.",
   "repository": {

package/web/app.js

@@ -435,7 +435,7 @@ async function api(path, options = {}, preparationAttempt = 0) {
     error.status = response.status;
     // Structured refusals (lastCopy, forever) ride to the caller so a button
     // can change its own words instead of string-matching prose.
-    if (body?.error && typeof body.error === "object") Object.assign(error, { code: body.error.code, status: response.status, forever: body.error.forever, lastCopy: body.error.lastCopy });
+    if (body?.error && typeof body.error === "object") Object.assign(error, { code: body.error.code, status: response.status, forever: body.error.forever, lastCopy: body.error.lastCopy, retryAt: body.error.retryAt });
     throw error;
   }
   if (path === "/v1/archives" && Array.isArray(body)) {
@@ -3683,7 +3683,14 @@ async function renderAccountCard(status, options) {
   }
 }
 
-let recoveryAccessState = { vaultExists: false, phraseHeld: null, kit: null };
+let recoveryAccessState = { vaultExists: false, phraseHeld: null, kit: null, kitCheckPausedUntil: null, accountReconnected: false };
+
+function recoveryKitPauseMessage() {
+  const retryAt = recoveryAccessState.kitCheckPausedUntil;
+  const when = retryAt && Number.isFinite(Date.parse(retryAt))
+    ? ` until ${new Date(retryAt).toLocaleString()}` : " until the service limit resets";
+  return `${recoveryAccessState.accountReconnected ? 'This computer reconnected successfully. ' : ''}Cloud Recovery Kit check is paused${when}. Reconnecting again will not lift the service limit.`;
+}
 
 function paintRecoveryAccess() {
   const panel = $("recovery-access-panel");
@@ -3697,7 +3704,9 @@ function paintRecoveryAccess() {
       ? "Keychain: this machine does not hold its recovery phrase."
       : "Keychain: recovery phrase status is not available yet.";
   const kit = recoveryAccessState.kit;
-  $("recovery-access-cloud").textContent = kit?.eligible === true
+  $("recovery-access-cloud").textContent = recoveryAccessState.kitCheckPausedUntil
+    ? recoveryKitPauseMessage()
+    : kit?.eligible === true
     ? kit.available
       ? `Cloud Recovery Kit: ${kit.remaining} unused backup code${kit.remaining === 1 ? " remains" : "s remain"}.`
       : "Cloud Recovery Kit: no unused backup codes are available."
@@ -3764,6 +3773,7 @@ async function pollAccountReconnect() {
       return;
     }
     accountReconnect = null; button.hidden = true; button.href = '#recovery-kit'; button.textContent = 'Reconnect account';
+    recoveryAccessState = { ...recoveryAccessState, accountReconnected: true };
     message.textContent = 'This machine is reconnected. Checking your existing Recovery Kit…';
     overviewDetailCheckedAt = 0;
     try {
@@ -3812,6 +3822,7 @@ $('recovery-kit-account').onclick = async (event) => {
   try {
     const renewed = await api('/v1/account/reconnect', {method:'POST',body:'{}'});
     if (renewed.reconnected) {
+      recoveryAccessState = { ...recoveryAccessState, accountReconnected: true };
       try { popup?.close(); } catch {}
       message.textContent = 'This computer is reconnected using its existing device seat. Checking recovery access…';
       overviewDetailCheckedAt = 0;
@@ -3850,7 +3861,7 @@ async function renderRecoveryKit() {
   try {
     const kit = await api("/v1/recovery-kit");
     if (accountReconnect) return;
-    recoveryAccessState = { ...recoveryAccessState, kit };
+    recoveryAccessState = { ...recoveryAccessState, kit, kitCheckPausedUntil: null };
     paintRecoveryAccess();
     account.hidden = true;
     if (kit.eligible == null) {
@@ -3873,9 +3884,14 @@ async function renderRecoveryKit() {
     button.textContent = kit.available ? "Replace backup codes" : "Create Recovery Kit";
   } catch (error) {
     if (accountReconnect) return;
-    recoveryAccessState = { ...recoveryAccessState, kit: null };
+    recoveryAccessState = { ...recoveryAccessState, kit: null, kitCheckPausedUntil: error.code === 'rate_limited' ? (error.retryAt || 'pending') : null };
     paintRecoveryAccess();
     button.hidden = true;
+    if (error.code === 'rate_limited') {
+      account.hidden = true;
+      state.textContent = recoveryKitPauseMessage();
+      return;
+    }
     const needsAccount = /JWT|credential|sign|account|unauthorized/i.test(error.message);
     account.hidden = !needsAccount;
     state.textContent = needsAccount
@@ -3923,7 +3939,9 @@ function recoveryAccessSummary() {
   if (kit?.eligible === true) {
     return { message: "This machine can open your memories, but no usable Cloud Recovery Kit exists. Create one below for lost-machine recovery.", tone: "warn" };
   }
-  return { message: "This machine can open your memories, but Sealkeep could not confirm off-machine recovery. Reconnect the account and check again.", tone: "warn" };
+  return { message: recoveryAccessState.kitCheckPausedUntil
+    ? `This machine can open your memories, but off-machine recovery cannot be confirmed right now. ${recoveryKitPauseMessage()}`
+    : "This machine can open your memories, but Sealkeep could not confirm off-machine recovery. Reconnect the account and check again.", tone: "warn" };
 }
 
 async function recoverMachine() {